General
- Target 2024-09-05_2855efb98519df3078678d8ed96365e1_magniber_revil_rhadamanthys
- Size 70.4MB
- Sample240905-lhkxjaybph
- SHA256 05073d3f8f92fdf1064d69dc0ade649099b6f23732f4241ede68541418c3a5a8
- MD5 2855efb98519df3078678d8ed96365e1
- SHA1 b5d387a8445502781cf966b7b8fe97afb2206308
- SHA512 bc329d4bef86f990e0cfc5da6c859393fce6175703c0f17cdc4b862668f1e2d4583da386b3204b92dd8c596237bdb9a62180dd51274ce8faa92f4d0b39e4720e
- SSDEEP 1572864:LoxuVkox/ETpYcqn1GRa6CzAYhYbinNSMpZ5KcR8UqCIayPlDo:sMpova
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-09-05_2855efb98519df3078678d8ed96365e1_magniber_revil_rhadamanthys.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-09-05_2855efb98519df3078678d8ed96365e1_magniber_revil_rhadamanthys.exe
Resource
win10v2004-20240802-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-09-05_2855efb98519df3078678d8ed96365e1_magniber_revil_rhadamanthys
- Size 70.4MB
- SHA256 05073d3f8f92fdf1064d69dc0ade649099b6f23732f4241ede68541418c3a5a8
- MD5 2855efb98519df3078678d8ed96365e1
- SHA1 b5d387a8445502781cf966b7b8fe97afb2206308
- SHA512 bc329d4bef86f990e0cfc5da6c859393fce6175703c0f17cdc4b862668f1e2d4583da386b3204b92dd8c596237bdb9a62180dd51274ce8faa92f4d0b39e4720e
- SSDEEP 1572864:LoxuVkox/ETpYcqn1GRa6CzAYhYbinNSMpZ5KcR8UqCIayPlDo:sMpova
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtCreateUserProcessOtherParentProcess